What is claimed: 

1 1 . A method of improving security processing in a computing network, comprising steps of. 

2 providing a security offload component which performs security processing; 

3 providing control functions in an operating system kernel for directing operation of the 

4 security offload component; 

5 providing an application program; 

6 executing the application program; and 

7 executing the provided control functions during execution of the application program, 

5jk thereby selectably directing the security offload component to secure at least one communication 
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& of the executing application program, 
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ill 2. The method according to Claim 1, wherein the executing control functions include a 

ii 

i& function directing the security offload component to begin securing the communications. 

!;lf 3 . The method according to Claim 1 , wherein the executing control functions include a 

2 function directing the security offload component to stop securing the communications. 

1 4. The method according to Claim 2, wherein the function further specifies information to be 

2 used by the security offload component. 

1 5, The method according to Claim 4, wherein the specified information comprises one or 

2 more of: authentication information; cipher suites options; and security key input information. 
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1 6. The method according to Claim 1 , wherein the control functions further inform protocol 

2 layers of the operating system kernel to modify outbound data in preparation for use by the 

3 security offload component. 

1 7. The method according to Claim 6, wherein the modifications include reserving space in 

2 the outbound data for security headers and trailers. 

jU 8. The method according to Claim 1, wherein the control functions include providing client 

81 and/or server certificates to the security offload component for use in securing the 

Q 

3! communications. 
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!>k 9. The method according to Claim 1, wherein the control functions include providing one or 

& more keys or key rings to the security offload component for use in securing the communications. 

1 10. The method according to Claim 1, wherein the control functions include providing an 

2 identification of a encryption algorithm to the security offload component for use in securing the 

3 communications. 

1 11. The method according to Claim 1, wherein secured outbound data of the executing 

2 application is thereby sent to its destination directly from the security offload component, after a 

3 single pass over a data bus from a protocol stack of the operating system kernel. 
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12. A system for improving security processing in a computing network, comprising: 
a security offload component which performs security processing; 

at least one control function in an operating system kernel for directing operation of the 

security offload component; 

means for executing the at least one provided control function; and 

means, responsive to operation of the means for executing, for directing the security 

offload component to secure at least one communication of an application program. 

13. A computer program product for improving security processing in a computing network, 
the computer program product embodied on one or more computer-readable media and 
comprising: 

a security offload component which performs security processing; 

at least one control function in an operating system kernel for directing operation of the 
security offload component; 

computer-readable program code means for executing the at least one provided control 
function; and 

computer-readable program code means, responsive to operation of the computer- 
readable program code means for executing, for directing the security offload component to 
secure at least one communication of an application program. 
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